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(57) ABSTRACT 

Th e method fo r identity verification employs biometri c 
technology. Positioned at the center of the system is a stylus 
with any of a number of biometric properties or their 
combination or with one or more metric sensors, while the 
customer uses the stylus to sign his/her name, or even for 
writing anything. The identity verification system is used at 
point-of-sale terminals, in various closed environments, to 
access a computer network, in applications involving pen- 
based computers and smart -pens, and for e -commerce. 
Wfren fingerprint sensors are used, th e sensors are posi - 
t ioned in the stylus gri p, o ne sensor for the index finger, a nd 
a secoricTsensor for the thumb. I n one variation, one-to-one 
biometric matching "Ts""used. Each participant c a r nes on 
^his/her person a device that includes an encrypted biomet ric 
for reference purposes to gain access Into tne system. 
Processing is simplified since the system need only m ake a 
" MATCH" or "Mo MATCH" decision. I n a second variation 
that is particularly useful in closed environments, one-to- 
many biometric matching is used. During each event access 
request, the community of reference prints is searched for a 
match with the applicant. Each member of the community 
need carry nothing on his/her person to participate in the 
system. In either variation, the stylus is either attached to 
each site or is portable, one such stylus being carried by each 
participant. 

10 Claims, 18 Drawing Sheets 
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METHOD FOR IDENTITY VERIFICATION 

This Application is related to and claims priority under 
U.S. Sen No 09/490,687 entitled "Writing Implement For 
Identity Verification System" Filed Jan. 20, 2000, U.S. 
Provisional Application No. 60/177,390 entitled "Writing 
Implement for Identity Verification System" filed Jan. 20 
2000, U.S. Provisional Application No. 60/163,433, entitled 
"Writing Implement for Identity Verification System" filed 
Nov. 3, 1999, U.S. Provisional Application No. 60/154,590 
entitled "Writing Implement for Identification Verification 
System"filed Sep. 17, 1999, U.S. Provisional Application 
No. 60/144,028 entitled "Biometric Pen and Encryption; 
Device" filed Jul. 16, 1999, PCT Application No. PCT/ 
US99/07900 entitled "Biometric Hotel and Casino Play" 
filed Apr. 7, 1999, U.S. Provisional Application No. 60/119, 
408 Confirmation System" filed Feb. 10, 1999, U.S. Provi- 
sional Application No. 60/116,212 entitled "Identification 
Confirmation System" filed Jan. 19, 1999, U.S. Provisional 
Application No. 60/114,632 entitled "Identification Confir- 
mation System" filed Jan. 4, 1999, U.S. Provisional Appli- 
cation No. 60/109,511 entitled "Biometric Writing Imple- 
ment" filed Nov. 23 1998, U.S. Provisional Application No. 
60/088,498 entitled "Biometric Hotel and Casino Play" filed 
Jun. 8, 1998, and U.S. Provisional Application No. 60/080, 
962 entitled "Biometric Hotel and Casino Play" filed Apr. 7, 
1998. 

FIELD OF THE INVENTION 

The invention relates generally to a method for authen ti- 
cating t he iden tification of a person u sin g biometric means, 
anb^more particularly for use at point-of-sale terminals ,_fpr 
u se in various closed environments, for accessin g a com- 
puter network, for applications involving pen-based com- 
puters and smart-pens, and for e -commerce. 

BACKGROUND OF THE INVENTION 

Wireless (e.g., radio, infrared, microwave) communica- 
tion links now enable computer systems comprised of very 
small portable computers that have the capability of being 
networked at all times and in all locations. Production of 
small, portable computers is the strongest trend in the 
computer industry, and wireless communication is one of the 
strongest trends in the telecommunication industry. 

The visible difference of pen-based computers from other 
technologies is in the use of a stylus (e.g. — a pen or pencil) 
as the primary means of interaction between a user and a 
machine, picking up the familiar pen and paper interface 
metaphor. With pen computing, a pen-like stylus is used on 
a digital surface to write and annotate information. Within 
the special computer is contained a digitizer which captures 
and interprets the text that is entered. 

The global workforce is increasingly mobile and pen- 
based computing is on the rise. Smart handheld devices are 
emerging from the realm of individual purchases to enter- 
prise deployment as they become key tools for connectivity 
to the corporate environment. Development of handheld 
applications and wireless technology tailored for the enter- 
prise represent are serving the increasing the remote and 
mobile worker population. 

Credit cards were originally introduced to for use at POS 
terminals to replace charge- a-plates. Plastic charge cards, 
debit cards, ATM cards, stored value cards are fair game for 
thieves. It is not uncommon for people to carry more than 
eight cards in their wallets. The cards must be replaced every 
few years, and the cards may become damaged with frequent 
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usage. In addition, consumer fraud and card counterfeiting 
are on the rise. The cards can be easily lost or stolen, 
signatures can be easily forged and PIN's can be readily 
determined by others. Hence, while plastic cards are easier 

5 to carry than money, they are almost as negotiable as money 
to sophisticated criminals. 

Also, a devastating pattern of security lapses is laid out in 
a 1999 congressional report on China's acquisition of 
America's most vital nuclear and missile secrets. Beijing 

10 remains far from nuclear parity with the United States. The 
federal government is right to concern itself with protecting 
America's computer networks against cyber attacks by 
terrorists or foreign governments. Computer network secu- 
rity is a real and growing problem. The Federal Government 

15 needs to protect not just sensitive defense secrets, but also 
the computers that manage air traffic control, Social 
Security, Medicare and a host of other civilian programs. 
Also, while E -commerce and smart pen technology find 
increased acceptance, the future growth of these technolo- 

20 gies will continue to be hampered by security concerns. 
The use of physical attributes — fingerprints, a voiceprint, 
or any of several other characteristics — to verify identity has 
great potential. Passwords and personal-identification num- 
bers (PIN's) are fraught with problems. Biometrics offers 

25 solutions. Applications that are preparing to accept biomet- 
ric data include computer networks, ATMs, cars, cellular 
phones, and dozens of other types of embedded systems. 

Widespread acceptance of biometrics means use in areas 
that daily affect the lives of millions of people. By replacing 

30 PIN's, biometric techniques prevent the unauthorized access 
to or fraudulent use of ATM's, cellular phones, smart cards, 
desktop PC's, workstations, and computer networks. For 
financial transactions conducted via telephone and wire, 
biometrics can replace PIN's and passwords. In buildings 

35 and work areas, biometric techniques replace keys, badges, 
and readers. 

By replacing PIN's for transfers of funds to the cards, 
biometrics enhance the security of credit/debit-card (plastic- 

^ money) systems and prepaid telephone calling cards. Bio- 
metric techniques also provide security not previously envi- 
sioned for "cash" balances stored in such cards. For POS 
terminals, biometric techniques can replace a clerk's veri- 
fication of a customer's signature. 

4 5 Biometric techniques can also potentially replace driver's 
licenses or passports for authenticating the identity of airline 
passengers. Similar techniques can replace or supplement 
passports and visas for establishing the identity of people 
seeking to cross national borders at customs and immigra- 

50 tion checkpoints. 

In hospitals, biometric techniques can replace ID brace- 
lets to establish patients' identities — for example, before 
blood administration. Biometrics could help confirm the 
identity of people seeking public assistance, Medicare, and 

55 other government and insurance benefits. In these 
applications, biometrics would replace or supplement a 
variety of systems, of which photo ID's are probably the 
most popular. Biometrics can also authenticate e-mail and 
other documents transmitted via computer networks, 

60 An example of a rapidly growing biometric technology, 
fingerprints offer an infallible means of personal identifica- 
tion and are rich in information content. The use of finger- 
prints for identification dates back many decades, but gained 
wide acceptance about 100 years ago. Fingerprints are the 

65 biometric that form the basis of all worldwide identification. 
Fingerprints don't change with time while other physical 
characteristics do. Fingerprint minutiae uniquely identify 
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fingerprints. It has been proven that minutiae, were unchang- rized access to certain events while barring unauthorized 

ing and repeatable features of each fingerprint, and were access, that can be readily adapted to include any number of 

individually unique. Each finger has a unique arrangement pen -based applications 

of ridge detail. There are two major types of information in what ^ nee d e d is a pen-based verification process that is 

a fingerprint. First is the ridge flow information, and second 5 compatible with encryption technology so that event access 

is the specific features or minutiae (rninnUa) of the finger- fc locally (a) eliminating most privacy concerns 

print. As used herein, the term "minutia is used to denote (b) ^phfying system i ogic while improving system speed, 

both the singular and plural. Fingerprints uniquely ^ identify ^ } r£ ^ cq and ^ of ^ biometric 

an individual based on their information content. Iniorma- v 7 

tion is represented in a fingerprint by the minutia and their „ tj ' . 

relative topological relationships. The number of minutia in 10 What is needed is a pen-based verification process that 

a fingerprint varies from one finger to another, but, on ^ ,P r0Vldc customers with the > privacy that they may want 

average, there are about eighty (80) to one hundred and fifty whlle ensurm £ the m f e g nt y accounts and their mime; 

(150) minutia per fingerprint. In the fingerprint context, a a W?** requires no hardware at the point-of-sale 

large store of fingerprints exists in law enforcement offices terminal other than a stylus (many similar type styli being 

around the country. Since fingerprints never change, a 15 alread y m P lace )^ a P rocess that Wl11 significantly reduce 

person need only be fingerprinted once to be in the system. transaction time; a process that is convenient to use and 

rro vt r /on .nn A / . i \ j* i unobtrusive to customers; a process that provides improved 

U.S. Pat. No. 5,680,470 (Moussa et al.) discloses a jj *i_ * • j 

A . , c . ^ . « . . • ! • ' c . ! . processing speed and accuracy: a process that is secure and 

method of signature verification involving a set of template * * -,r i . j r n 

*u 4 ■ a e 4 * f * „A*«if safe from illegal entry; and a process for confirming per- 

signatures that are examined tor test features which are 9n , .„ & . JL\ • f. 7 n 

& i- j j • 1 . r ^ jc--ii sonal identification that is reliable, a process that will 

normalized and irrelevant features are removed. Similarly, A „ t . . r 

U.S. Pat. No. 5,559,895 (Ixe et al.) discloses a system for actuaU y **»«»ge thiev6S - 

real time signature verification where the signatures are SUMMARY OF THE INVENTION 

digitized for statistical analysis and various personal features . 

are selected ^ ne metn °d for verifying identity of the present invention 

r\ l \ i * -a ♦ • + „«. 25 addresses these needs and revolutionizes the nature of 

Current stylus-type verification systems use metric-type t _ . . , ( _ . 

sensors-accelerometers and pressure sensors to measure P«i-based event access^ Positioned at the center of the 

stylus pressure and stroke sweep in the users' signature. U.S. P roccss 15 a ^ ^ ^ of a . n u umber of b»™tac 

Pat. No. 5,774,571 (Marshall) discloses a stylus with mul- Properties or their combination or with one or more metric 

tiple sensors for biometric verification including grip pres- 30 SeDS ° rS ' ^ te J^ ^/her name, or even for 

sure sensors and gyroscopes. U.S. Pat. No. 4,513,7437 wntlD S ^ ih ^ The identity verification process of the 

(Chainer et al.) discloses another data input stylus for present mvenhon can be used at POS terminals, m various 

signature verification which includes accelerometers and strolled environments, to access a computer network, in 

pressure sensors. U.S. Pat. No. 5, 1247,137 (Epperson) applications involving pen-based computers and smart-pens 

discloses a stylus that enables biometric identification by 35 c " commerce ^. conventional writing implements, and 

means of comparison of graphics data and textural data from multi-purpose writing implements. 

a remote location. The stylus also captures strokes and The biometric properties that can be captured include, but 

gestures which can also be used for confirming identifica- are not limited to, fingerprints (fingerprint sensors), voice 

tion. U.S. Pat. No. 5,103,486 (Grippi) discloses a system for recognition (e.g.— microphone), facial imaging (e.g.— 

using a combination of biometrics at POS terminals. Prisms 40 camera), and DNA and other biotech properties (e.g.^cell 

are used to capture the fingerprint of the index finger while capture/analysis sensors). Metric properties include, but are 

the individual signs his/her name. The fingerprint image and not limited to, grip and point pressure (e.g.— pressure 

the signature are processed to form a composite represen- sensors), position of the index finger relative to the point, 

tative for comparison with information shown on a credit position of the thumb relative to the index finger (e.g.— 

card for processing of commercial transactions. 45 1116113131 sensors )> an £ le of the durin S ^ a S e ( e -8-— a 

What is needed is a pen-based verification process that gyroscope), speed of signing (e.g.— a timer), increases and 

enables an event to occur only when identity has been decreases of speed during signmg (e.g.— an accelerometer). 

confirmed,theprocessemployingstate-of-the-artsensors(a) ™* st y lus * either tethered (Cached) to each site or is 

that can be used for signature verification at poin^f-sale portable, one such stylus being earned by each user, 

terminals that captures biometric data in a nonobtrusive 50 }n_ a first preferred embodiment of the identity verificati on 

manner, while serving as a system that can eventually process 01 me present invention une-io-many biometric 

replace card-based transaction systems; (b) that can authen- matching is used . T his embodiment is partic ularly useful in 

ticate identity continually in pen-based computing systems controlled environments such as hotels, hospitals, and^ mili- 

to ensure that the person seeking access to information has tary bases, where the size of the community is limited. One 

pre-approved authorization for such access; and (c) that is 55 °~ r more biome trics ^and metrics) are captured for referenc e 

compatible with smart pens ensuring the use of the pen and purposes . during registration. During e ach event access 

access to data through the pen has been pre-approved. r equest, the community 01 reference prints is searched for a 

What is needed is a process that is compatible in smaller match with the user. 

closed environments where the size of the community is Each member of the community need carry nothing on 

limited for confirmation of event access without the need for 60 his/her user to participate in the system, 

encryption techniques once identification has been verified In a second preferred embodiment of the identity verifi- 

by biometric means; a process that enables the use of cation process of the present invention, one -to -one bio metric 

biometric sensors in a broad range of applications while matching is used. This embodiment requires each user to 

eliminating the need for separate biometric sensors and units carry on his/her user a device that includes an encrypted 

with wiring that would otherwise need to be integrated into 65 reference biometric for reference purposes to gain access 

the existing systems; that is user friendly, nonobtrusive to into the system. The encryption device can be the stylus, a 

use, virtually impregnable to criminals, that enables autho- card, a stylus insert (as herein described), or a device carried 
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on a key-chain. Processing speeds for this embodiment only for purposes of signature verification. Initially, the 

considerably faster than the first preferred embodiment, system of the present invention will verify signatures replac- 

since the system need only make a "MATCH" or "NO ing these styluses. Next, the use of credit and debit cards will 

MATCH" decision. While the processing can occur at a become optional. 

central computer, it is preferred that the matching logic be at 5 For a more complete understanding of the identification 
the access site, inside a smart card, or inside a smart pen to verification method of the present invention, reference is 
minimize privacy concerns. mac fc to the following detailed description and accompany- 
One preferred application for the identity verification ing drawings in which the presendy preferred embodiments 
process of the present invention involves pen-based com- 0 f ^ invention are shown by way of example. As the 
puting systems. Pen-based computer systems are ideal for 10 invention may be embodied in many forms without depart- 
applications which require: (1) highly portable devices— from spirit of essential characteristics thereof, it is 
that are no longer constrained by a keyboard; (2) intuitive expressly understood that the drawings are for purposes of 
features — that resemble an environment familiar to the illustration and description only, and are not intended as a 
users; (3) improved efficiency,— that enables accurate data definition of the limits of the invention. Throughout the 
collection and manipulation.; and (4) flexibility— that 15 description, like reference numbers refer to the same corn- 
enables a wide variety of types of data entry. Several ponent throughout the several views, 
applications of the identity verification system of the present 

invention include: BRIEF DESCRIPTION OF THE DRAWINGS 

N urses and doctors can track and record patient histories pjQ ^ discloses the preferred embodiment of the multi- 

" aslthey make their rounds, using chpboard-like_gom - 2 rj purpose stylus of the present invention; 

nuters and pens to access and enter patient, information mQ 1B discloses a pre f erred embodiment of a functional 

over .a wireless, network iromservers throughout the bk)ck 1 ^ aL&sm of the identity verification system of the 

fe^P*^ — ' present invention; 

Insurance claims adjusters can assess automobijedam- RG 2 A discloses a writing stylus with fingerprint sensors 

ages on site, looking up relevant cost information with 25 foruse in ^ system of the preS ent invention with a built-in 
t he pen, then printing the estimate and writing a chec k 

to the repair shop at the end of the visit. ^Sg. 2B discloses a section of the writing stylus shown it, 

Sal es representatives can track inventory and the effect o l plG 2A taken ^ 2A— 2A- 

30 FIG.3Adisc^^ 

trlnsmitted throu gh a phone line back to headquarters. ^yius with grip for use m the system of the present invention 

Another premier application of the identity verification with a bunt-in grip, 

process of the present invention involves POS terminals FIG. 3B discloses the print images obtained from the print 

with either one or two fingerprint sensors disposed within imaging sensors in in the system of the present invention 

the stylus. The stylus enables signature verification at POS 35 with a built-in grip; 

terminals, either with credit-type cards, or in lieu of such FIG. 3B discloses the print images obtained from the print 

cards. The user signs his/her name using the biometric imaging sensors in the writing stylus of FIG. 3A; 

stylus. The prints are again captured and compared to the FIGS. 3C and 3D disclose additional embodiments of the 

prints of all registrants in search of a match. Once the stylus, the fingerprint sensor being disposed within an insert 

financial institution confirms that there are sufficient funds in 40 positioned on the click-button on the top distal end of stylus 

the account, the amount is debited from the account, and the having a retractable point; 

transaction is approved. FIG. 4A discloses an assembly view of one preferred 

The stylus enables the conversion at POS terminals when embodiment of the stylus of the present invention with the 

used to veri signatures. A cardholder can transfer funds into fingerprint sensor configuration in the top of the stylus; 

a new account at a POS terminal by use of a credit card at 45 nGS ^ ^ ^ 4D var ious grip configura- 

a POS terminal by using the stylus of the present invention. tions which provide alignment of the print sensors with the 

The cardholder swipes his/her card through the cardreader fingef and 

and signs and prints his/her name using the stylus of the piGS ^ 5£ vark)us { 
P resentinvention.lliepnnUarecapturedandthecardhoW^ configurations that are compatible with conventional sty- 
advises the credit card financial institution of the amount to 50 ^ ^ ^ & cQrd oom)CCticm to the 
be transferred. Account information is exchanged and the w ^ ^ incorporated int0 ^ ffip . 

card is not needed next time simplified logic diagram of one 

Registration using the identity verification process of the . ' * . & . r # u 

, " .■ * . » — — . Mr „ . embodiment of the identity verification system of the present 

present invention i s similar to opening a new bank account. y - v ■ . <■ ■ 

E " , - , r — T fe . * Fpr -rr— cc invention, demonstrating how a user registers for participa- 

I nitially, the user registers by using the stylus. The applican t 55 ^ vc ^" u "> ucmuiDU h & r r 

provides th e financial institution with basic lntormaTio n; tl0n in tne s y stem i 

nam e, address, phone n umber, an d s igntSr^fee^nfy FIGS. 7A and 7B disclose a simplified logic diagram of 

tefence iTtoffiffi st ylu s " or ' UT e p resent^ntion enables one embodiment of the identity verification system of the 

t he " capture of biometnc data while the applicant sign s present invention demonstrating how the user accesses an 
his/h er name. Ano ther way to register at POS terminals, is to 60 event in the system; 

replace styluses currently used for signature verification FIG. 8 discloses a simplified logic diagram for use with 

with the biometric pens of the present invention. Once the the identity verification system of the present invention, 

prints are initially captured, the card isn't needed. The next enabling a user to convert from a card-based transaction 

H mp the. system to a pen-based transaction system without the need 

Styli with metric sensors and signature verification sys- 65 for any cards in subsequent transactions; 

terns are already beginning to appear at some POS terminals. FIG. 9 discloses a payment selector used by a user to 

These stylus do not capture fingerprints, but rather are used select which account the transaction is to be paid from in 
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another variation of the identity verification system of the 
present invention; 

FIG. 10 discloses a keypad for use with a digitizing 
surface to enable data entry such as a primary identifier for 
use with the identity verification system of the present 
invention; 

FIG. 11 discloses another preferred embodiment of a 
simplified process flow path for identity verification using 
the biometric identification system of the present invention; 

FIGS. 12A and 12B disclose a first preferred embodiment 
of the stylus insert of the present invention; 

FIGS. 13A and 13B disclose a second preferred embodi- 
ment of the stylus insert of the present invention; 

FIGS. 14A, 14B and 14C disclose a third preferred 
embodiment of the stylus insert of the present invention; 

FIGS. 15A and 15B disclose a fourth preferred embodi- 
ment of the stylus insert of the present invention; 

FIG. 16 shows the identity verification system of the 
present invention as incorporated into a smart pen; 

FIGS. 17A, 17B, and 17C show the stylus system of the 
present invention as used various configurations of pen- 
based computers, including (a) a lap-top computer, (b) a 
palm-type computer; and (c) a hand-held computer, respec- 
tively; 

FIG. 18 shows the identity verification system of the 
present invention in an e -commerce application being used 
when the user signs his/her name; 

FIG. 19 shows the identity verification system of the 
present invention as used in a multi-purpose application, 
including a conventional pen, a conventional pencil, and a 
stylus for use with a pen based computer; 

FIG. 20A discloses still yet another preferred embodiment 
of the identity verification system of the present invention, 
the stylus being foldable into a card, the card having an IC 
chip with an encrypted biometric print and biometric print 
sensors embedded in the card, the card-pen being compat- 
ible with conventional card readers, the card-pen being 
unfoldable lengthwise for transformation into a pen; and 
FIG. 20B shows the card of FIG. 20A after folding for use 
as a stylus. 

DETAILED DESCRIPTION OF THE 
PREFERRED EMBODIMENTS 

Referring now to the drawings, in the broadest terms the 
preferred embodiment of the identity verification system 
used with the process of the present invention, as shown in 
FIG. 1 comprises a stylus 15 with biometric sensors 20 
disposed in a grip 30, and a computer processing unit 40. 

As used he rein unless t he context indicates otherwise, a 
"stylus" is any device thai is compatible with either the hand 
or finger of the user for purposes of making a marking on an 
essentially flat surface. While the drawings depict a conve n- 
t ional shape of a stylus, other shapes and designs are al so 
i ncluded within the scope of the present invention such as 
any attachment to a finger or any implement that can be he ld 
with a hand for such purpose. Also, as used herein unless th e 
context suggests otherwise, the term "fingerprin t" refers to 
either the p rint of the i ndex finger or me tnu rnb. In additio n, 
as useif herein unless the context suggests otherwise, th e 
term "biometric" that are unique to the actual physica l 
^features o RES' user including^ bu^ ara not ^ryiite^ toT pnger - 
prints, (fingerprint sensors), v oice recognition (e.g. — 
microphone), facial imaging (e.g. — camera), and DNA and 
other biotech properties (e.g. — cell capture/analysis 
se nsors). The signature of the user is generally not consid- 
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ered to be a biometric, unless otherwise indicated in the 
context of which it is used. Biometrics are to be distin- 
guished from the term "metrics" which include, but are not 
limited to, grip and point pressure (e.g. — pressure sensors), 

5 position of the index finger relative to the point, position of 
the thumb relative to the index finger (e.g. — thermal 
sensors), angle of the stylus 15 during usage (e.g. — a 
gyroscope), speed of signing (e.g. — a timer), increases and 
decreases of speed during signing (e.g. — an accelerometer). 

10 The stylus 15 of the present invention has numerous uses, 
and primarily for purposes of illustration, include signature 
verification at POS terminals, pen-based computers user 
identification, and to provide improved convenience to 
guests within various controlled environments. 

15 Positioned at the center of the system is a stylus 15 with 
any of a number of biometric properties or their combination 
or with one or more metric sensors, while the user signs 
his/her name, or even for writing anything. The identity 
verification system of the present invention 10 can be used 

20 at POS terminals, in various controlled environments, to 
access a computer network, in applications involving pen- 
based computers and smart-pens, and for e-commerce, con- 
ventional writing implements, and multi-purpose writing 
implements. The stylus 15 is either tethered (attached) to 

25 each site or is portable, one such stylus 15 being carried by 
each user. In a first preferred embodiment of the identity 
verification system of the present invention 10, one -to -many 
biometric matching is used. This embodiment is particularly 
useful in controlled environments such as hotels, hospitals, 

30 and military bases, where the size of the community is 
limited. One or more biometrics (and metrics) are captured 
for reference purposes during registration. During each 
event access request, the community of reference prints is 
searched for a match with the user. Each member of the 

35 community need carry nothing on his/her user to participate 
in the system. This embodiment can also be used in open 
^gvir^nmrnt^ in with the user supplying add i- 

tion nl in^T-™a*i>»n gyri ng each request for event acce ss 
( i e. — printed name, phone number, social security numbe r) . 

40 See for example U.S. Pat. No. 5,805,719 (Pare, Jr., et. al). 
In a second preferred embodiment of the identity verifi- 
cation system of the present invention 10, one-to-one bio- 
metric matching is used. While this system can also be used 
in controlled environments, it is preferred in open environ- 

45 ment situations where the size of the community is continu- 
ally expanding through registration without limitation. This 
embodiment requires each user to carry on his/her user a 
device that includes an encrypted reference biometric for 
reference purposes to gain access into the system. The 

50 encryption device can be the stylus 15, a card (e.g. — credit, 
debit, ATM, check, driver's license, identification card), a 
stylus cap, a stylus grip a stylus insert 50 (as herein 
described), a device carried on a key-chain, as a piece of 
jewelry, as an implant device, or by some other means. The 

55 encryption device is compatible with the system described in 
copending PCT Application PCT/US99/07900. Processing 
speeds for this embodiment considerably faster than tbe tirs t 
p referred embodiment since the system need o nly make, a 
" MATCH" or "NO MATCH" decision. Since the match ing 

60 is preferably on e-to-one as opposed to one-to-many, th e 
quality~T)T~the sensor need not be forensic qualit y^althougb 
o ne is preferred and, only one sensor is needed^ &hile the 
p rocessing can occur at a central computer, it is preferr ed 

that, fhf matting Ingjc fre, at the, anness site-Qr-a-m^iQiifllsite 

65 to jninimize priyacv concerns. 

Preferably, the processing occurs within the pen, an 
identification card, a smart card, or within a processor at the 
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site of the transaction. In another preferred embodiment of matchbox-sized fingerprint Header enj^Jes full fe ature 
the present invention 10, the processing occurs at the POS extraction a nd match in less than one second. Instead of 
terminal. In yet another preferred embodiment of the present entering an ID and password to get into a corporate. network, 
invention 10, the processing takes place at a regional com- users simply put their finger atop the glass lens of a tiny 
puter. Localized processing is preferred for purposes of 5 reader affixed to the personal computer. The device photo- 
simplicity, speed, and to ensure individual privacy. As the copies the print and compares it to a database of thousands 
processing moves up the chain, it becomes more complex. of other prints in well under a second. The Identicator print 

Of^l] thR arp.as nf hinrnfttrira, fingerp rint sensingjias seDSOr enables secure user authentication on PC's. 
captured the imagination of the largest number of com pa- TouchSafe Personal from Identrix is a state-of-the-art 
piesT Four in tegrated circuit manufacturers embody unusual 10 fingerprint verification reader. The design works with 
fingerprint-sensing technologies in new chips. ST Micro- portables, desktops or servers, and assists with finger place - 
electronics and Veridicom provide integrated circuit ment. TouchSafe Personal uses an internal 32-bit RISC 
approaches — are dc-capacitive sensors. Harris Semiconduc- processor, compact optics and encrypted serial communica- 
tor Corp. provides an ac-capacitive sensor. Thomson- CSFs tions. The optional smart card reader can store the tinge r- 
FingerChip uses thermal sensing. Each integrated circuit 15 print template and other confidential data. The Identix 
sensor produces a high-resolution (several-hundred-pixels TouchPrint 600 Live-Scan Workstation is a fingerprint sys- 
by several-hundred-pixels by 8 or 16 bits) image of a finger tern that produces forensic-quality tenprint records by elec- 
tip. These images are comparable with those obtained by tronically scanning and capturing rolled fingerprints, 
pressing inked finger tips onto absorbent paper. Automatic ST Microelectonics Model # STFP2015-50, a fingerprint 
fingerprint-identification systems can process imag es 20 sensor ^ TouchChip, clusters 100,000 sensors onto a 20-by- 
obt ained from biometric sensors just as_easily_as fro m 15-millimeter surface. The sensors, which individually mea- 
im ages obtained from inked fingers. sure 50-by-50 micrometers, incorporate an active pixel and 
In uncompressed form, the images occupy several hun - two capacitive plates per sensor element. All told, the array 
dred kilobyJ es^ Manv fingerprint-based authentication sys - consists of more than 98,000 pixels, enabling it to achieve 
t erns store the images in a compressed form, in whichlh ey 25 resolutions of 508 dpi. Two metal plates are placed in the 
o ccupy approximately IQkhytes. Although the image com - cell area, separated by a passivation oxide. The skin surface 
pfession employ lossy algorithms, the algorithms are tuned acts as a third plate, separated by a dielectric layer with 
for fingerprint recognition. Generally, there is little or no variable thickness. The sensors convert the distance betwee n 
di fference between the original and the decompressed t he finger and the surface ol trie device to an electricalsign al, 
^ images . An even more compact way to store the im portant 30 and because fingerprint valleys are farther from the sen sor 
\ featore^ o TfingerpTih^ i s lurxUa^mm^_a^ .. MinuUaear e surface tha n ridges, thev prqduce a_different outpu t. Since 
J t he points at which fingerprint patterns branch and end. A tne chip is sensitive to 3-L> contours, it can't be fooled by 
\ minutiae file can occupy as much as 1200 bytes. Either w ay, photographic images. The chip includes an 8-bit parallel 
L»minutiae files significantly co mpress the__Qi i ginfl1 image data interface and an 12C interface. Power consumption is 
"The dc-capacitive fingerprint sensorslrom^STMicroelec- 35 less than 200 megavolts at 5 volts. An on-board AID 
ironies and Veridicom comprise of rectangular arrays of converter eliminates the need for much of the external 
capacitors on a silicon chip. One plate of the capacitor is the circuitry. It's basically a stand-alone sensor, and the sensor 
finger to be sensed; the other plate is a small area of a pixel is so small that you can incorporate it onto a keyboard, PC, 
disposed upon the surface of the chip. The finger is posi- ^ orceUjhone, 

tioned against the surface of the chip — actually, against an / The stylus 15 includes one or more sensors 20 that capture 

~ ~ ' ' biometric properties of the user. The computer (chip) 40 



insulated coating on the surface of the chip. The ridges of the 
fingerprint are close to the nearby pixels and have high 
capacitance. The valleys are more distant from the pixels 
nearest them and have lower capacitance. The sensor then 
draws a fixed charge from each pixel in turn — that is, it scans 
the pixels. A high voltage appears on pixels to which the 
finger has low capacitance, and a low voltage appears on 
pixels to which the ringer has a high capacitance. 

Veridicom, Inc. uses a CMOS chip. These plates are 
covered with a thin layer of dielectric. When a finger is 



processes the captured information to determine whether to 
enable access to an account/network/entry, or other entry or 
privilege once identification has been confirmed. In one 
preferred embodiment, the system includes means to enable 
the user to enter a primary identifier, the identifier being a 
series of letters, digits, a spoken word converted to text 
(speech recognition), or the like. The primary identifier is 
preferably the user's printed name, the user's birthday (and 
year), zip code, mother's maiden name, or PIN or password. 



placed on top of the chip, each sensor acts as the bottom The biometric stylus 15 of the identity verification system 

plate of a capacitor, with the surface of the finger acting as of the present invention 10 has print imaging sensors 20 In 

the top plate. The Veridicom chip is as small as a postage the grip 30 to sense the index fingerprint and thumb print, in 

stamp — can be easily embedded into laptop computers and 55 addition to other biometric sensors 20 including but not 

keyboards. Accompanying circuitry measures the capaci- limited to the following: pressure sensors (point and grip); 

tance of each of these sensors. Fingertip "valleys" are further accelerometers; gyroscopes; position of index finger relative 

from the chip, and show as a lower capacitance. Fingertip to point; position of thumb relative index finger. FIG. 11 

"ridges" yield a higher capacitance. The chip's dielectric discloses a simplified logic diagram where multiple biomet- 

technology enables people to touch the sensitive, silicon 60 ric sensors 20 are used to determine account confirmation, 

chip without destroying it. The dielectric is chemically and The biometric stylus 15 of the identity verification syste m 

mechanically strong enough to allow repeated contact with o f the present invention has print sensors 20 positioned 

people's fingers, yet electronically sensitive enough to cap- within the unique grip 30 (see F IGS. 2 A and 2BV Ele^ rnnic 

ture the prints. Other suppliers of CMOS fingerprint sensors i mages o f the index finger an dlhumb are extracted.d uring 

useTl l herj 



are Siemens, and Harris. 65 u seTThereafter. the user utilizes a similar stylus 15 to subm it 

Identicator Technology Inc. uses Identicator's DFR-200 a set of p ri nts for com parison wi th thr .. sr , t nf prints nl . t he 
reader technology and its software algorithm technologies. A a uthorizea^ser — tne prints either match o r dgj& jnatebr. The 
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use of two prints makes a mistake highly unlikely. The stylus 
15 thwarts forgers since even if the signature is the same the 
prints are not (the content of the writing is unimportant). The 
stylus 15 is provided by financial institutions, POS 
terminals, and government agencies worldwide. The prin- 
ciples of the biometric stylus 15 are combined with other 
biometrics housed within the stylus 15 to provide near 
perfect confirmation. Digital systems evaluate the finger- 
print by comparing the similarity, number, and unit relation- 
ship of the points of distinction. 

There are several basic embodiments of a fingerprint 
stylus 15; 

(1) a stylus 15 is attached or tethered to a system; 

(2) a device compatible with the tethered stylus 15 is 
completely portable; and 

(3) a stylus 15 for a pocket or hand-held computer that is 
personal to the individual. 

FIGS. 12A and 12B disclose a first preferred embodiment 
of the stylus insert 50 of the present invention; FIGS. 13A 
and 13B disclose a second preferred embodiment of the 
stylus insert 50 of the present invention; FIGS. 14A, 14B 
and 14C disclose a third preferred embodiment of the stylus 
insert 50 of the present invention; and FIGS. 15A and 15B 
disclose a fourth preferred embodiment of the stylus insert 
50 of the present invention. 

In another preferred embodiment, the Insert 50 fits onto 
the cap of the stylus 15. The term "insert" as used herein is 
a device that includes an encrypted reference identifier. The 
insert 50 contains the encrypted print and the name of the 
user owning the card. The insert is also linked to one or more 
accounts. The grips 30 are for use with a narrow stylus 15 
about the size of a pencil or a conventional BIC® pen. This 
enables a deeper grip 30. The grip 30 almost completely 
surrounds the index finger enabling the use of a sensor the 
size of a postage stamp. Almost any sensor the size of a 
postage stamp which is the size of most fingerprint sensors. 
Also, single sensor may be used in sites where smaller 
transactions are involved. The stylus insert 50 of the present 
invention is preferably stored in wallet or on key-chain for 
ready availability. The insert 50 is compatible with the 
system described in copending PCT Application PCT/US99/ 
07900. 

There 'are numerous advantages to having a stylus 15 or 
an encrypted print for each user: (a) the biometric sensing is 
far less complex since the sensors 20 need only confirm a 
one-to-one match and generally only one sensor is needed 
(eliminating the need for identifiers), (b) there is no need for 
a master databank of biometric prints— each print can be 
encrypted into the stylus 15 (much like a smart-card), (c) no 
sensors are needed at POS terminals, as the sensor in the 
stylus 15 is used to match the encrypted registered biometric 
print, (d) the privacy issue is significantly overcome since 
the only matching is needed is in the pen-based computer. 

The registered biometric print can also be encrypted in a 
smart card 60 within a conventional credit, debit, or check 
card. This embodiment is fully compatible with current 
encryption technology where one or more prints are already 
being preserved in the smart card 60 for use at POS 
terminals with a sensor unit positioned at each terminal — 
these sensor units can be replaced by the stylus 15 of the 
present invention. However, the encrypted print can also be 
within a smart driver's license or a social security card. 

In a first series of preferred embodiments of the identity 
verification system of the present invention 10, the system 
need only perform a one-to-one match to confirm user 
identification. This is accomplished by (1) the user who 
owns and carries his/her own pen; (2) the user carrying an 
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insert 50 on his/her user that includes an encrypted print, the 
insert 50 being compatible with the stylus 15 tethered to one 
of the terminals; (3) the user carries on his/her user a 
pen-based computer that is compatible with the computer 
5 network of the system; (4) the user carries on his/her user a 
credit/debit-type card that includes an encrypted print in 
either the magnetic stripe or an IC element of a smart card; 
and (5) the user carries on his/her user a card that becomes 
a pen (for example, see FIGS. 20A and 20B), the card-pen 
10 including an encrypted print in either the magnetic stripe or 
an element of a smart card. 

The user need only employ the stylus 15 of the prese nt 
invention for signing purposes. U nce a print is captured^ it 
is compared with trie encrypted print in the smart card 60. If 
15 th ere is a match the event is allowed to pro ceed. I f there is 
n o match, the event is blockecL ^ 

"The insert 50 is compatible with the stylus 15 or the stylus 
grip 30 or the stylus top (retractable point) and enables 
access with one-to-one matching for a wide variety of 
20 computer security applications — for controlling access to 
network services, or anywhere a password, cookie, token, 
digital certificate or smartcard is used. The insert 50 can be 
plugged into any standard USB port. Like smartcards and 
other cryptographic tokens, the insert 50 provides an alter- 
25 native to a smartcard and smartcard reader. 

The ins ert 50 provides users and remote clients w ith 
st rong authentication for ensuring secure access to virtu al 
p rivate networks and secure computer network equipme nt. 
T hrough user ide ntific atio n da ta contained in each key , a 
30 s ecure network is able to grant or deny acc ess according to 
t he authorization level of each user. T he insert 50 is small 
enough to carry on a key ring or the like for use as an access 
token for virtual private networks. Users need not memorize 
multiple passwords or jump through numerous security 
35 screens. USB is a new connect technology featured as 
standard equipment on desktop systems, servers, and por- 
table computer devices currently being marketed. 

Each insert 50 contains one or more encrypted references, 
which are unique to each user. Using this secret value, the 
40 insert 50 can compute a cryptographic response to chal- 
lenges sent from the network. This method has significant 
security benefits over passwords. Specifically, the insert 50 
computes a "one-way hash function" using the challenge 
and its encrypted reference as input. The insert 50 is secure 
45 and proves to the server that it knows the secret value, 
without ever revealing it. Even if malicious software is 
running in the client's workstation at the time of 
authentication, it cannot duplicate the insert's functionality 
at a later time. This proven cryptographic technique is now 
50 specified as part of the Internet Key Exchange standard 
protocol. 

Either the prints of the thumb and index finger and the 
thumb can be captured and encrypted, or reliance can be 
placed on only the print of either. The index finger is 
55 preferred if a single print is used a larger print segment will 
generally result because of the grip 30 generally applied to 
a stylus 15. 

FIG. 3C discloses yet another embodiment of the stylus 
15 of the present invention, the fingerprint sensor being 
60 placed in the top distal end of the stylus and tethered to the 
counter top. In order to release the stylus point from the 
stylus body, it becomes necessary to press the click button, 
where the stylus point is retractable and compatible with a 
digital surface. Since this clicking force is generally applied 
65 by the thumb, the captured print is compared with a refer- 
ence thumb print. The stylus point withdraws automatically 
after a predetermined period of time after each use. 
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The identity verification system of the present invention 
10 is particularly useful in controlled environments. As used 
herein, unless the context suggests otherwise, a controlled 
environment is a community of people that: (1) requires 
registration to become a part of the community; and (2) 
where the purchase of goods or services occurs. Some 
examples of controlled environments include: hotels -resorts, 
luxury cruise liners, airports, banks, racetracks, bowling 
alleys, theme parks, hospitals, college campuses and public/ 
private schools, military bases, hotel-casinos, sports 
complexes, shopping malls, and prisons. Once enrolled into 
the cardless transaction system of the present invention, any 
guest upon registration with the hotel complex has full and 
complete access to any amenity within the complex, at 
anytime, without carrying on his/her user anything other 
than biometric identification that is inherent in his/her being. 
As used herein a "controlled environment" does not require 
a single physical structure, but rather includes a network of 
related activities administered by a centralized driver. Some 
examples of these type controlled environments include a 
bank and its customers, a regional of drugstores, health club 
facilities, restaurants, or beauty salons and their customers. 

Encryption registration systems are known in the art. U.S. 
Pat. No. 5,903,225 (Schmitt et al.) describes one method of 
encrypting a fingerprint into a card, and U.S. Pat. No. 
5,623,552 (Lane) describes a self-authentication system 
enabling identity verification. The stylus 15 can be used for 
one-to-one matching without a master databank of biomet- 
rics or for one-to-many matching 

1) a wireless stylus 15 is used at the terminal; 

2) match is confirmed internally between the user's print 
and the encrypted print; 

3) the stylus 15 is confirmed not to be a counterfeit; 

4) the encrypted reference print is checked to ensure that 
there has been no tampering; and 

5) event access is enabled. 

FIGS. 6 A and 6B disclose a simplified logic diagram for 
registration with the identity verification system of the 
present invention 10. The user initially registers with a 
financial institution or POS terminal by signing his/her name 
with a special identical stylus 15 and exchanging legal 
tender to open the account. The account can be a debit 
account, a savings account, a checking account, or even a 
credit account. Later when the user wants to access the 
account to pay for goods or services, he signs his/her name 
with an identical stylus 15. Whenever the user wants to 
access the credit account at a POS transaction, an identical 
stylus grip 30 is preferably used, the user signs his/her name, 
and the computer searches through the appropriate files for 
purposes of comparison (see FIGS. 7A and 7B). When the 
biometric property is a fingerprint sensor, the size of the 
stylus 15 mandates that a smaller sensor be used, resulting 
in the capture of only a partial print. Accordingly, it becomes 
necessary that the stylus 15 includes guide means to ensure 
that the finger is positioned at the same site on the grip 30 
to ensure that the same portion of the print is captured in 
each subsequent use. However, if a cell capture sensing 
method id used such as DNA, finger position on the stylus 
15 is not critical so long as cell capture occurs and compared 
against a reference cell for matching. 

In still another preferred embodiment of the identity 
verification system of the present invention 10 additional 
biometric sensors 20 are periodically added to the stylus 15 
to provide the financial institution with all information that 
is necessary. So long as the additional sensors 20 do not 
affect the weight or balance of the stylus 15 so that finger- 
print and signature biometrics are altered, no harm is done. 
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When registration occurs at someplace other than a finan- 
cial institution, such as a POS terminal, the user pays legal 
tender to the merchant (a pre-paid or stored value type of 
account) who in exchange opens an account for the user. The 

5 financial institution is affiliated with the merchant, thereby 
enabling the user to open an account without ever having 
any bank affiliation. Such an account can be one where the 
user opts not to use fingerprints and selects a pseudonym for 
purposes of privacy as hereinafter described. 

10 In one preferred embodiment of the Identity verification 
system of the present invention 10, the sensors 20 capture 
the fingerprints of the index finger and thumb. The stylus 15 
preferable has a special sensing grip 30 to fit the hand and 
enable a good reading of the thumb and index finger. The 

15 grip 30 is transparent. The stylus 15 is preferably portable 
and Includes a sensor an optical or print imaging sensor. 
Once read, the images of the prints are captured for further 
processing. In one preferred embodiment, the biometric 
stylus 15 includes temperature sensors for purposes of 

20 activation. The sensors are well known in the art and are 
similar to the heat sensors found in elevators, the heat from 
the hand engaging the system. 

In another embodiment, the point of the stylus is a 
conventional fountain stylus 15 that ensures that the orien- 

25 tation of the stylus 15 is aligned with the print sensors 20 
disposed within the stylus 15. Preferably, a print sensor is 
disposed on the top surface of the stylus 15 and two 
additional sensors are disposed on the adjacent side surfaces 
of the stylus 15. This ensures repeatability of print images 

30 sensed. 

For a right-handed user, the index finger is aligned with 
the point and the thumb is positioned on the stylus surface 
abutting the left-side of the stylus top surface. For a left 
handed user, the index finger is aligned with the point and 

35 the thumb is positioned on the stylus surface abutting the 
right-side of the stylus top surface. By capturing and com- 
paring the index finger and thumb print of the applicant with 
the reference finger and thumb print, the likelihood of an 
error becomes highly unlikely. In the event that a biometric 

40 stylus 15 or grip 30 is not available, manual backup enables 
conventional identity confirmation. Accordingly, sensors 20 
are positioned within the stylus 15 to read each of these 
prints. 

The stylus 15 has a special sensing grip 30 to fit the hand 

45 and enable a good reading of the prints of the index finger 
and the thumb. The cross-section of the stylus 15 is generally 
rectangular with rounded corners, and the print surfaces for 
the thumb and index finger are slightly recessed and con- 
cave. FIGS. 5A, 5B, 5C, 5D, and 5E disclose various 

50 preferred embodiments of grip 30 configurations that are 
compatible with conventional styluses and pencils, the grip 
30 including a cord connection to the writing surface, and 
sensors 20 being incorporated into the grip 30. FIG. 5E 
shows a teardrop configuration with the seam pointing 

55 upward. The applicant points the seam upward and places 
his/her index finger on one side of the seam and his/her 
thumb on the other side of the seam. This embodiment 
assures that only two sensors 20 are needed whether the 
applicant is right or left handed. Also, the combination 

60 concave -convex shape enables a larger portion of the two 
prints to be sensed by the print imaging sensors 20. FIGS. 
3A and 3B disclose a U-shaped grip 30 and the images 
captured therefrom with the sensors 20. 

In one variation, the biometric stylus 15 is tethered 

65 (attached) to a surface or counter by means of a plastic 
coated hollow tube, containing fiber optic cable therewithin. 
It is through the fiber optic cable that the print images are 
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transmitted to the processor disposed within the surface or 
counter. The sensors 20 are disposed within the stylus 15. In 
another variation, the biometric stylus 15 is portable. While 
th e sensors 20 are also disposed within the stylus 15, t he 
si gnals of the prints are transmitted to the processor_ for 5 
co nversion a nd storage. T he prints of the thumb and index 
fin ger are preserved" in the systems processor for as re fer- 
ences for subsequent comparisons . T he goods and serv ice 
providers have a similar stylus 15 which is used by the gu est 
to ,confirm identification and ac cess, the mt\\\ ^rmunt io 

In another embodiment a grip 30 is provided that is 
compatible with conventional styluses and pencils, the print 
imaging sensors 20 being positioned, within the grip 30. The 
grip 30 is symmetrical and preferably has a cubical shape 
with concave sidewalls. A power cord is affixed to the grip- 15 
30 to provide power to the sensors 20 and also to prevent 
theft. If the stylus 15 wears out or breaks down, it can be 
readily replaced with another conventional stylus 15, at a 
modest cost. Also, by having standard grip sizes, any prob- 
lem with using biometric styluses of differing sizes which 20 
might change some of the properties of the biometrics are 
eliminated. The grip 30 configurations are designed to 
provide as good a reading as possible of as much of the index 
finger and thumb print as possible. Certain preferred 
embodiments include concave cubes (see FIG. 4C), an 25 
enlarged cylindrical chamber section (see attached drawing). 
The grip 30 is preferably transparent and is designed to be 
self-aligning, that is, the user must grasp the grip 30 where 
the sensors 20 are located to use the stylus 15. FIG. 4B is 
self-aligning using a lip that eliminates the need for a third 30 
sensor to accommodate both left and right-handed people. 
FIG. 4D discloses a fountain pen type stylus which is 
self- aligning because of the orientation of the stylus tip. 

Also, the power uni t of the stylus 15 can be incorporated 
i nto the body of the styiusTST-m & ki rig - thc stylus 15 pm ta ble 35 
a nd self-containe d. In the otner primary embodiment, t he 
styl us 15 is affix ed to th e tablet counter to preve nt theft. T he 
s tylus 15 includes a print imaging senso r configuration, as 
t he signals or the prints are transmitt ed for processing. T he 
fiber optic cable transmits print images to a process or. The 40 
pr ocessor 1R pnaitinnftri within me suTfacezcQ ^terTlhe sty- 
l us 15 includes a ser tsor confi guration for cap turing one or 
metri cs and/or biometric s. 

"Tor transactions involving" a larger pools of potential 
users, processing strategies are needed so that the system 45 
need not continually process millions of files to confirm or 
deny access. One main purpose of a credit-type card is to 
provide a primary identifier for file searching purposes. 
When the identity verification system of the present inven- 
tion 10 has widespread global acceptance, it will become 50 
necessary to distinguish the user from hundreds of millions 
of other people. It is not practical to have the driver search 
such numbers of records for each transaction. 

The primary identifier in a conventional credit card trans- 
action is any one of the following: the imprinted name; the 55 
imprinted PAN; or the information stored in the magnetic 
stripe (smart card). 

To replace a card, the replacement system also preferably 
includes at least one primary identifier. Examples of primary 
identifiers comprise birthday (6 digit code), zip code, PIN, 60 
or printed name. There is a preference for numerical data 
because of language and translation problems, since Arabic 
numbering is essentially the global standard. 

Certain basic strategies are needed. Since the fingerprints 
enable determination of whether the user is right or left 65 
handed, records of people that don't match the hand of the 
user are discarded immediately during processing. In one 
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preferred embodiment, the signature is the first biometric 
processed (when fingerprints are not used). The print of the 
index finger and thumb are the next biometrics used. If either 
or both cannot be read, the user is so advised and the 
transaction is rejected. If the prints are of good quality, each 
is checked as against the remaining records in the pool of 
registered records. The prints of each transaction are pre- 
served and used to develop an improved composite of the 
user's prints for subsequent transactions. 

In one preferred embodiment, a numerical is used (see 
FIG. 10) to streamline the confirmation process. The user 
enters a zip code or perhaps a PIN which is checked prior to 
the signature. The zip code is preferred in instances where 
the clientele is national or international, whereas a PIN is 
preferred for instances where the transaction is regional. 

There are two basic type of card transaction that the 
principles of the identification system of the present inven- 
tion 10 are of particular applicability to: 
Credit transactions where the user needs to identify 
himselfyherself so that the institution can determine 
credit status for purposes of advancing credit. It is 
critical that exact identity be made at time of registra- 
tion so that credit histories can be properly accessed 
and analyzed; and 
Prepaid or stored value type of transactions where the user 
has deposited an amount of money for subsequent use. 
In one preferred embodiment of the present invention, the 
exact identity of the user can be withheld in prepaid or 
stored-value transactions. In one preferred embodiment of 
the present invention, the stylus 15 includes an on-off 
switch. In the off position, the fingerprint sensors 20 are not 
used, so that the confirmation is done without sensing the 
fingerprints. In this embodiment, the signature becomes the 
primary biometric. If the user signs a pseudonym rather than 
his/her regular name, withholding his/her actual name, the 
system processes the transactions without knowing the 
user's actual name or his/her prints. As long as the pseud- 
onym is used to access the account, anonymity is assured 
while using the identification system of the present inven- 
tion. 

The same result can be achieved by having two separate 
styluses, (1) a stylus 15 which includes print sensors 20 for 
transactions where privacy is not the primary concern; and 
(2) a stylus 15 without print sensors 20 for stored value or 
prepaid accounts. In yet another preferred embodiment, the 
print sensors 20 are incorporated in the grip 30, and the grip 
30 is removed when the fingerprints are not to be used. The 
only thing that is necessary is that the individual be able to 
access his/her account, so that the system provides near 
perfect repeatability. Of course the user will need to remem- 
ber the alias used to access the account. This is particularly 
attractive feature to those people with concerns about indi- 
vidual privacy, since they may participate in blind transac- 
tions while using the stylus 15. The users can obtain 
print-outs of monthly statements by going to a special 
terminal and verifying his/her identification with a biometric 
stylus 15 and thereafter requesting such information. 

The identity verification system of the present invention 
10 comprises biometric registration upon entry into the 
complex, biometric access to a guest room, biometric play of 
slot machines, biometric play at gaming tables, and biomet- 
ric purchases on-site within the complex such as restaurants, 
lounges, boutique shops, and the like. 

A guest to register upon registration with the hotel com- 
plex confirms his/her identity upon arrival and check- in, 
selects an amount to be entered into an account, enters 
biometric identifiers that are to be used on-site during his/her 
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stay. Thereafter whenever the guest seeks access to his/her 
room or access to the account, identification is confirmed by 
matching the biometric identifiers and the guest can partici- 
pate in amenities offered within the complex. The biometric 
identifiers are preferably prints of the index finger and 5 
thumb. The stylus 15 is preferable a stylus which has a 
special sensing grip 30 to fit the hand and enable a good 
reading of the thumb and index finger. The stylus 15 is 
preferably portable and includes a sensor an optical or 
imaging print sensor. Once read, the signals of the prints are 10 
transmitted for processing. The guest can add value to 
his/her account at terminals throughout the casino. 

The system enables a guest to make any on-site purchase, 
at a restaurant, lounge, boutique shop, or the like and access 
the balance for use in the complex. The guest grasps a 15 
biometric stylus 15 similar to the implement used at regis- 
tration to enter the print of the index finger and thumb. A 
fingerprint sensor reads the thumb and index- finger print 
from the implement and seeks a match with all registered 
prints in the system. Once identification has been confirmed, 20 
and the available credit balance in the guest's account is 
sufficient to cover the purchase, the purchase is made and the 
account balance is decreased by the amount of the purchase. 

Transactions where the pool of potential users is under 
50,000 people include controlled environments like resorts, 25 
hotels, colleges, dormitories, theme parks, prisons, cruise 
liners, and the like. For this volume of registrants, the 
primary identifier is not needed, but if used, does improve 
transaction time and system efficiency somewhat. 

The identity verification system of the present invention 30 
10 enables a credit card holder to convert the account to use 
with the biometric stylus 15 (see FIG. 8 which discloses a 
simplified logic diagram). The conversion process enables 
the cardholder to conduct either card-based transaction, 
pen-based transactions, or their combination. Upon signing 35 
with the stylus 15, the system driver accesses the user record 
for the cardholder and creates a duplicate record in the 
identity verification system of the present invention 10. 
Thereafter, the cardholder transfers legal tender from his/her 
card credit balance to the new account. FIG. 9 discloses a 40 
payment selector enabling a user to select which account the 
transaction is to be paid from in another variation of the 
identity verification system of the present invention 10. 

A credit cardholder can also set up a new account at a POS 
terminal by use of his/her card. The cardholder swipes 45 
his/her card through a cardreader and signs and prints his/her 
name using the biometric stylus 115. The biometrics are 
captured and the cardholder advises the credit card financial 
institution of the amount to be transferred to the new 
account. Account information is exchanged and the card is 50 
no longer needed. 

A variety of digitizing inscription pads are known in the 
art. U.S. Pat. No. 5,652,412 (Lazzouni) discloses an appa- 
ratus for reading and storing coordinate information repre- 
sentative of the instantaneous position of a stylus on a 55 
writing surface. The system provides a writing paper having 
a prerecorded pattern of pixels, each pixel containing 
encoded location information which identifies an absolute 
and unique coordinate location on the paper. The system 
enables the simultaneously recording of written information 60 
on encoded paper and for recording the written information 
in a memory. Also, U.S. Pat. No. 5,263,742 (Koch) discloses 
a fingerprinting system where the print is developed by 
making a copy on a sensitized surface by back reflecting 
radiant energy through an adhesive where the print is 65 
imaged. Similarly, U.S. Pat. No. 5,709,746 (Ballard) dis- 
closes a self-contained fingerprint kit. 



While the biometric stylus, signature, and other biomet- 
rics that can be captured by the combination stylus 15 and 
digitizing inscription pad are sufficient to distinguish the 
user from hundreds of millions of others, an efficient search 
strategy is needed. 

While there has been considerable development of tech- 
nology of improved sensing systems for signatures, the 
signature will never be the biometric of choice in the identity 
verification system of the present invention 10 since hand- 
writing and signatures change with time and with each 
writing such that a match with perfect confidence is not 
possible. However, the signature is needed for legal 
purposes, so that it will always be needed to include some 
sort of signature verification into any identification system. 

The biometrics needed are all provided by the stylus 15, 
The primary biometric is the print of the index finger, and 
the thumb print being the other primary biometric. Some 
examples of metrics include stylus point pressure, stylus 
grip pressure, accelerometers, gyroscopes, position of index 
finger, position of thumb relative to index finger. Also, a 
timer is extremely useful in measuring biometrics associated 
with signature. The timer is useful in determining accelera- 
tion and deceleration, the time needed to sign the name, the 
time spacing that the stylus 15 is lifted from the digital 
surface, and first name time, middle initial time, and last 
name time. 

Alphanumeric data for the primary identifier can be 
provided by (1) a digitizing inscription pad, (2) a mouse and 
CRT, (3) a touch sensitive CRT, (4) voice and speech 
recognition, (5) a keypad embedded in the writing surface, 
and (6) the stylus. In applications involving larger 
populations, one preferred embodiment includes multiple 
identifiers to speed up the system processing time. 

Financial institutions benefit in that credit card fraud is 
eliminated. The Identity verification system of the present 
invention 10 is virtually impregnable to criminals. The 
financial institution controls the entire transaction, since 
they capture and process as many biometrics as necessary 
before deciding whether or not to approve. Merchants and 
users also benefit since consumer fraud costs are often 
passed onto them. Fingerprints are recognized all over the 
world as positive proof of identity and are the key to the 
system. Each finger contains up to 100 different points of 
distinction which never change with time. Merchants benefit 
in that the transaction time is minimized. The identity 
verification system of the present invention 10 system 
minimizes the time between when the user signs his/her 
name and when the transaction is approved. The system 
automatically captures the fingerprint data when the user 
signs his/her name and processing begins immediately. Any 
transaction that does not involve cash requires a user sig- 
nature anyway — his/her obligation to pay. Users also benefit 
from improved transaction efficiency by not having to wait 
in slow-moving lines. Users benefit in that all cards are 
eliminated. Cards are easily lost or stolen, signatures are 
easily forged and PIN's are readily determined by criminals. 
While cards are easier to carry than money, they are almost 
as negotiable as money to sophisticated criminals. The 
identity verification system of the present invention 10 
system provides maximum security and safety for the user 
by eliminating the need to carry all credit cards, debit cards, 
ATM cards, stored value cards, and pre-paid cards in a wallet 
or purse. 

As shown i n FIG. 2A, the identit y verification system of 
t he present invention 10 uses a Diometric stylus 15 that h as 
print imaging sensors 20 positioned within the unique gr ip 
30. Electronic images of the index finger and thumb are 
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extracted during user registration. Thereafter, an applica nt 
u ses a s i milar stylus 15 to submit a^set of prints for 
comparison with the set of prin tsoft^e_a uthorized user — the 
""p rints eitner match or don 't~ match . The use oi two prints 
makes a mistake highly un likely. The stylus 1 5wilHhwart 
forgers since the content or trie writin g is^importanCTtje 
stylus 15 is provide d by fin an cial_ institutions, POS 
terminals, ana gov ernment agencies wo rldwi de. 
^ in one preterred embodiment, the principles of the bio- 
metric stylus 15 can be combined with signature verification 
technology to identify the applicant and the writing content. 
Also, since prints of the index finger and thumb of the 
writing hand are the most common biometrics, once cap- 
tured the prints can be used for comparing other types of 
touch contact (e.g. — a keypad). In another preferred 
embodiment, a digitizing inscription pad is used, and the 
position of the stylus 15 relative to the surface enables 
determination of the written text. An optical sensor in the 
writing surface captures the signature or the writing to be 
used in combination with the prints. Alternatively, the sys- 
tem includes a keypad in the writing surface for the user to 
enter a PIN instead of the optical sensor or in addition to the 
optical sensor. 

Registration in the identity verification system of the 
present invention 10 is similar to opening a new bank 
account. An application provides the financial institution 
with basic information — name, address, phone number, and 
signature. The only difference is that a special stylus 15 is 
used that enables the financial institution to capture certain 
data while the applicant signs his/her name. These biomet- 
rics include prints of the index finger and thumb, and point 
and grip pressure. 

The account can be accessed at any POS terminal. The 
user signs and prints his/her name using a biometric stylus 
15 that's identical to the stylus 15 used during registration. 
The biometrics are again captured and compared to the 
biometrics of all registrants in search of a match. The 
financial institution then confirms that there are sufficient 
funds in the account, deducts the amount from the account, 
and approves the transaction. 

A credit cardholder can also set up a new account at a POS 
terminal by use of his/her card. The cardholder swipes 
his/her card through a cardreader and signs and prints his/her 
name using the biometric stylus 15. The biometrics are 
captured and the cardholder advises the credit card financial 
institution of the amount to be transferred to the new 
account. Account information is exchanged and the card is 
no longer needed. 

Automated systems evaluate the fingerprint features b y 
showing the coincidence of the minutiae features, takin g 
i nto consideration the similarity, number, ana 1 uniT relation - 
ship of the characteristics to each other. Searching and 
m atching o f fin g er prints is accomplished by assigning eac h 
rhinftiae pointa positio n on an x/y coordinate, a direction of 
fl gw^^ Tei'ationship to other m inutiae. If a user has J o use 
a gtylus 15 anyway to verify a commercial transact ion, why 
_not use sensors 20 in the stylus 15 and writ ing surface to 
confirm identification (forget abo ut the pla stic cards). 
~Tu still auuLhei piel'eued emDocument of the identity 
verification system of the present invention 10, other sensors 
are added to the stylus 15, as necessary, to tighten security 
and reduce fraud — including a pressure sensor to measure 
point pressure; another pressure sensor to measure grip 
pressure; an accelerometer to the stylus point to measure 
stroke speed; a gyroscope positioned at the top end of the 
stylus 15 to measure the angle of the stylus 15; a heat sensor 
in the stylus grip 30 to measure position of the index finger 
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relative to the point; and a position sensor in the stylus grip 
30 to measure the position of the thumb relative to the index 
finger. 

Additional sensors include measuring the speed of the 
5 signature, the user's finger temperature, and so on. While all 
of these biometric identifiers are subject to minor variations, 
the financial institution checks as many as needed until it is 
satisfied that the user seeding entry is authorized to access 
the account. 

10 In a perfect system, the user who is entitled to entry will 
always be enabled entry, and all others will always be 
blocked. Hence, in addition to primary identifiers and bio- 
metrics (primary and secondary) other demographic infor- 
mation is analyzed when the decision of identity is in doubt 

15 to assure that the system of the present invention 10 operates 
in a near-perfect manner. Such demographic information 
includes the location of the transaction request relative to the 
primary residence of the registrant, the frequency (if ever) 
that the registrant has ever engaged is such transactions, and 

20 whether or not the registrant has made other transaction 
during the past 24-hour period and where such transactions 
are located. 

In yet another embodiment a grip 30 is provided that is 
compatible with conventional styluses and pencils, the print 

25 imaging sensors 20 being positioned within the grip 30. The 
grip 30 is symmetrical and preferably has a cubical shape 
with concave sidewalls. A power cord is affixed to the grip 
30 to provide power to the sensors 20 and also to prevent 
theft. If the stylus 15 wears out or breaks down, it can be 

30 readily replaced with another conventional stylus, at a 
modest cost. Also, by having standard grip sizes, any prob- 
lem with using biometric styluses of differing sizes which 
might change some of the properties of the biometrics are 
eliminated. Some primary applications for the identity veri- 

35 fication system of the present invention 10 include identi- 
fication for (1) Drivers' license registration and verification; 
(2) Voter registration and confirmation; (3) Law enforce- 
ment; (4) Credit card verification; (5) All banking transac- 
tions; and (6) College and high school students for applying 

40 for financial aid and to confirm test-taker identification. 
In still another embodiment of the identity verification 
system of the present invention 10, the biometric stylus 15 
is combined with one or more primary identifiers to authen- 
ticate identification to replace credit, debit cards and the like, 

45 The primary identifiers include phone number, name, area 
code or zip code. The system performs the initial search 
based upon the primary identifiers) to reduce the size of the 
universe. Then identity is either confirmed or denied based 
upon the prints. In another preferred embodiment, additional 

50 biometric sensors are used in addition to the fingerprints. 
One example of the use of the identity verification system 
of the present invention 10 is in a hotel casino complex. The 
system of the present invention comprises biometric regis- 
tration upon entry into the hotel-casino, biometric access to 

55 a guest room, biometric purchases on-site within the com- 
plex such as restaurants, lounges, boutique shops, and the 
like, and biometric play of slot machines, biometric play at 
gaming tables. 

The biometric identifiers are preferably prints of the index 

60 finger and thumb and are sensed by means of a stylus 15. 
The stylus 15 is preferable a stylus 15 which has a special 
sensing grip 30 to fit the hand and enable a good reading of 
the thumb and index finger. The stylus 15 is preferably 
portable and includes an optical or print imaging sensor. 

65 Once read, the signals of the prints are transmitted for 
processing. The guest can add value to his/her account at 
terminals throughout the casino complex. 
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When one uses a stylus 15, it is generally grasped by the don. A smaller pool of users is needed since only one print 

index finger and thumb for purposes of writing on a flat is read. However, keyboard sensors can be useful in 

surface. The stylus 15 includes two adjacent flat surfaces instances where the caller's phone number is read and there 

which are specifically configured to optimize the complete- are only a limited number of people authorized from that 

ness of the prints taken. If the guest is right-handed, the 5 number as with a modem. Also, keyboard sensors can be 

surface used to read the index finger is to the right of the used in combination with PIN's to provide increased secu- 

second surface. If the guest is left handed, the surface for the rity. 

index finger is to the left of the second surface. In both Preferably, multiple b io metrjc prints areus ed t o confirm 

instances the second surface is used to read the guest's identification . 5 econdary~biome1rics include not onl y 

thumbprint. Accordingly, sensors 20 are embedded within 10 hngerprmtsTmumbprints, and palm prints, but also spee ch 

the stylus 15 to read each of these prints. and voice recognition, and tacial readings (retinal scans , 

A distinction is made between applications involving the j atrared tacial readings, feature spacings, and the I ikejMfo 

matching of prints of the guest requesting access as against e xample, to enter a guest room, a parallel system ma y 

a limited number of authorized entrants (guest room access) include a recorded message asking "Who's there?" Th e 

and those applications where the prints of the guest request- 15 r esponse is recorded through a speaker and voice recog ni- 

ing access are compared against a large number of guests in tion is used to identity the speaker. Speech recognition can 

the system (slot and table play in a casino). While both also be used to monitor the content of the response. Also, 

instances require a comparison with known authorized facial imaging scanners are disposed within the doors to 

entrants, the former comprises a much smaller pool and guest rooms and in overhead cameras with mirrors in the 

processing is greatly simplified. In the latter, the central 20 casinos for use as secondary biometrics. All unauthorized 

processor needs to process a considerably more data, and biometric prints can be preserved for law enforcement 

search strategies are used to streamline the search. purposes to assist in identifying and convicting burglars and 

For example, in applications involving slot machine JhieveSj — " 

access, the search compares the prints of the player seeking The system is also applicable to resort hotel complexes 

entry with all registered guests. Initially, the prints of the 25 that do not include slot machines, tables gaming, and other 

guest seeking entry are compared with the player who last type of gambling activity. Similarly, the principles of the 

played this slot machine. Absent a match, the prints are present invention are also applicable to standalone casinos 

compared with other players playing adjacent machines. that do not have guest rooms. Registration can occur for a 

Absent a match, the prints are compared with all players in standalone casino either off-site Or with pre-authorized third 

the general area within the last few minutes. Eventually, the 30 parties or with the casino. 

pool is expanded until all registered guests have been A debit variation of the system of the present invention 

screened for a match. To improve efficiency, the prints can provides improved user convenience for debit, pre-paid, and 

be sorted by types and styles that are well known in the art. stored-value type transactions. No credit is extended to the 

The pool is gradually expanded in logical incremental steps. user, who pays for his/her account in advance. This variation 

With each gradual expansion, previously checked prints can 35 opens the financial system to everyone, regardless of credit 

be dropped so that they are not rechecked. This area is rating, class, or legal standing. The user does not need bank 

continually expanded until a match is found or the search has affiliation, since the account is assigned to a system financial 

been completed. institution if none is designated. 

The identity verification system of the present invention The debit variation is initiated at any POS terminal, ATM, 

10 is readily adaptable to off-site purchases and other 40 or financial institution by transferring cash, checks, money 

applications involving the telephone or the keyboard of a order, or credit cards into the account Since credit is not 

computer (not shown). It often becomes necessary to con- being extended to the user, less information is needed, 

firm positively the identity of the user on the other end of the Registration occurs direcdy with a financial institution, or 

telephone. For off -site purchases by phone, it is important to with the stylus 15 of the present invention during a debit 

confirm the identify of the user making the purchase. Also, 45 transaction at a POS terminal (similar to the system of the 

many phones now have caller ID where the user receiving present invention). The debit variation also provides ano- 

the incoming call can read the caller's phone number before nymity in certain types of transactions. When the size of the 

answering the call. If the caller uses the engagement member participating group is limited, such as in a controlled envi- 

of the present invention, the user receiving the call can also ronment (hotel, amusement park, etc.), a stylus 15 can be 
identify the caller. 50 used without the fingerprint sensors 20. If the user selects a 

For the handle or handset of a telephone, the primary pseudonym, authentication is confirmed by the signature and 

prints are the thumb, the index finger, and the middle finger. the other biometric sensors 20 in the stylus 15. Absolute 

In another embodiment, the optical sensors can also be identity is protected without the prints and without disclos- 

positioned relative to any of the digital keys on the phone ing a true identity. 

and confirm identification. This approach is useful in appli- 55 Many retail outlets no longer accept checks because of 

cations involving a smaller pool of possible users since only fear of forgeries. A check confirmation variation of the 

one print is read. system of the present invention 10 provides the perfect way 

The identity verification system of the present invention to authenticate identification at a POS terminal. The user 
10 when used in applications involving keypads and com- registers with the stylus 15 of the present invention when 
puter keyboards includes a modified keyboard with the 60 opening his/her checking account. When writing a check, 
sensors positioned either relative to an existing key or a the financial institution is identified and approves the trans- 
special biometric push button having a recess to enable a action. The system also ensures against overdrafts. Signature 
three-dimensional print (see FIG. 10). When one or more verification for checks is an added benefit for POS terminals 
keys are pressed, the prints of the user are read to confirm that provide the system of the present invention 10. This 
that entry is authorized. 65 check authentication program can also replace conventional 

The optical sensors can also be positioned relative to any checks. The identity verification system of the present 

of the digital keys on the keyboard and confirm Identifica- Invention 10 provides user authentication, access control, 
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and personal accountability to provide — as an example — 
use by the pharmaceutical industry. 

Calm technology is the name that has been assigned to the 
third wave in computing, which is just now beginning. 
Mainframes, where each computer is shared by many users 5 
is the first wave. We are currently in the second wave of the 
personal computing era, where user and machine stare 
uneasily at each other across the desktop. In calm 
technology, the technology recedes into the background of 
our lives. These computing devices are unobtrusive and 
provide seamless access to a wide variety of data and allow 
the user to perform tasks as needed, where needed. Calm 
technology moves interaction with computers out of a user's 
central focus and into the user's peripheral attention where 
they can be used subconsciously. 

people are becoming mor e and more mobile and are 15 
re quiring access to tne internet, various other systems, da ta, 
^~and software. Systems have already evolved that re quire 
usenTTb be "connected" wherever they go all the tim e. 
Ind i viduals want to take t he same tool s a nd d ata the y have 
at their de sks^her^ inney ma^jgrfn a ddition, they w ant 20 
t ojgcess a va neTy-cjfj nformati on fr o m wh erever they^ pr the_ 
da ujsjlo cated. Acce^ sTto such c^ aja mu st be secure. 
* i; KeTiability and security are also important and necessary 
for mobile computing to be useful. Accordingly, the mobile 
user must have reliable access from anywhere at any time. 25 
While connected to systems and retrieving or transmitting 
data, security is at times extremely important. Secure con- 
nections may not be necessary when browsing the news on 
MSNBC, for example, but are highly desirable when con- 
nected to corporate databases or when electronic commerce 30 
is undertaken. 

The mobility of the user requires options other than a 
mouse and keypad for data entry and network access. The 
size of the screen makes it impractical to use touch-screen 
technology. A stylus is currently being employed in many of 35 
these applications. The stylus is particularly useful for 
accessing screens and menus. FIGS. 17 A, 17B, and 17C 
show various types of mobile computing devices using 
pen-based technology, including (a) a lap-top computer, (b) 
a palm-type computer; and (c) a hand-held computer, 40 
respectively. The identity verification system of the present 
invention 10 enables the network to confirm user identity 
prior to access to each menu or screen. This is a major 
improvement over a fingerprint sensor in the keypad to 
confirm identity during log-on. 45 

When one is "mobile" and using a computer to perform 
various tasks and access data, connecting to remote sites is 
simple and as transparent as possible. Using notebooks and 
PDAs (with Windows CE), the user remains connected to 
any number of systems while in remote locations. so 

Current mobile hosts such as notebooks, PDAs and cel- 
lular phones provide connectivity but lack interconnectivity. 
With these devices a user connects to another system on a 
point to point basis. Using calm technology become aware 
of each other and know how to exchange information among 55 
themselves. In addition, they become able to control each 
other as needed. 

Security is no longer an optional network component. 
Today organizations of all sizes are discovering the need to 
protect their networks from both external and internal unau- 60 
thorized users. In the days before remote access, organiza- 
tions had controlled, hard-wired networks, which provided 
physical security. Network access was limited to users 
physically located in the building. Requiring users to type in 
a name and password added another layer of security to the 65 
network. Providing remote network access has added an 
entirely new dimension to the problem. 
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The integrity of any system is compromised when any of 
the following occur: (1) confidential information is available 
to unauthorized parties; (2) the user's identity is not con- 
tinually authenticated; (3) information content is corrupted 
when the information is not received as originated; (4) the 
user can deny the communication; (5) access control to 
resources is not controlled by authorized parties; and (6) 
data resources are not available to authorized users when 
needed. 

The identity verification of the present invention 10 
provides network access security by; (1) controlling unau- 
thorized access to the network; (2) controlling improper 
access by network users; and (3) monitoring of user access 
to network resources. The pen-based computing network 
initially identifies the user, and continually controls and 
monitors user activity while the user is plugged in. 

Two additional applications of the identity verification 
system of the present invention 10 involve (a) smart-pens; 
and (b) electronic commerce. The principles of the present 
invention are completely compatible with smart-pen tech- 
nology. The miniature technology, which integrated sensors, 
mouse, digital signal processor, radio transceiver and 
encryption software in an actual stylus 15. Smart-pen tech- 
nology captures the written text generated by the stylus 15 
for subsequent use. The device looks and works like a big 
stylus 15 but is actually a miniature computer system. 
Hence, the stylus 15 of the present invention confirms user 
identity during normal usage of the stylus 15 and the 
smart-pen technology captures the content of the written text 
onto any surface. The smart-pen technology is particularly 
useful for students taking notes in class, writers, and man- 
agement staff — the paper need not be preserved. 

The smart-pen is a wireless stylus 15 that writes on 
regular paper but is connected to the computer. The smart- 
pen measures speed, and acceleration forces in three 
dimensions, and calculating the data. The smart-pen feels 
and looks just like a real pen. Assuming the writing surface 
to be a fixed plane, as the smart-pen writes, the stylus tip will 
travel through mree-dimensional space near the paper. The 
tip of the stylus 15, as calculated, is a three-dimensional 
curve lying around the writing surface. The curve is pro- 
jected on that plane representing the stylus tip's path along 
the paper, this path is the written text, incorporating unique 
characteristics of the writer. Therefore signature verification 
with the smart-pen does not depend on the graphic image of 
the signature but on the dynamics of the act of signing. The 
dynamics are strictly personal and thus allow the authenti- 
cation of the signer. 

The , identity verification system of the presen t invention 
10 also provides a safe and attractive al ternative to elec - 
tr onic commerce, particularly over the Internet. By authen- 
ticating the author of a transaction, the act becomes uii de- 
n jable. rh e a dvanced micro mecha nics and micro 
el ectronics built into the stylus 15 e nabtelhe usag e of a 
r egular pen [ as biometfic Input device. Th e stylusj.5 can b e 
used to malce inter net" transactions or Fank transfers secu re, 
b ecause It unequiv ocally authent icates a user. In order to 
i ncrease its user ffie^ 'iness^impje^pen^functions are 
inco rporated within this miniatuce .camau.ter. 

The ease and the low cost of transactions over any 
network, make the stylus 15 of the present invention an ideal 
payment device and an excellent device for buyers: sales 
channels, Internet channels and virtual shopping. 

By authenticating the author of a transaction, the act 
becomes undeniable. The advanced micro -technology of the 
smart-pen, enables the usage of a conventional stylus 15 as 
a biometric input device. The stylus 15 provides identity. 
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verification for numerous electronic commercial tra nsac- 
tions including: 

a) Privacy protection for medical records and tele- 
medicine; 

b) Trace-ability of drugs; 5 

c) Remote writing (White-boarding) on PC or TV 

d) Image conversion of handwriting 

Another biometric that is recommended in the identity 
verification system of the present invention 10 involves cell 
capture while the pen is being used. The advantage of this 10 
biometric over fingerprints is that accuracy is not dependent 
upon the size of the sensor or print that is captured. 

GeneTrace Systems is currently marketing technology 
involving a new high-resolution mass spectrometry-based 
method for chemical analysis of large single-stranded DNA 15 
oligomers. The mass spectra are obtained in seconds instead 
of the usual hours needed for gel electrophoresis currently 
used, and no radioactive or fluorescent materials are needed. 
The technique has high mass capabilities and opens new 
avenues of study as in chemical modifications of DNA, 20 
DNA-peptide/protein interactions such as antisense drug 
development. DNA sequencing and quality control for syn- 
thetic DNA and related products are also potential applica- 
tions. The basic technology can be applied also to peptides 
and proteins and used for protein structure determination, 25 
phosphorylation, glycosylation, and other studies. Previ- 
ously it had not been possible to apply mass spectrometry 
successfully to anything larger than about a 4-mer and 
thereby obtain the advantages the mass spectrometry tech- 
nique can offer in precise and accurate molecular weight 30 
determination. The new physico-chemical sample prepara- 
tion opens this capability to single-stranded DNA molecules 
above 50,000 Dalton, with a mass accuracy of 0.01% in the 
10,000 Dalton range. This is much higher accuracy and 
resolution than is obtainable with state-of-the-art electro- 35 
phoresis techniques. 

Another approach is to use surface-confined arrays of 
highly selective sensing elements. Chemical and biological 
sensors are required to perform multi-analyte measurements 
rapidly, accurately, and at increasingly lower cost. Arrays of 40 
immobilized single-stranded DNA (ssDNA) probes, 
so-called DNA chips, are being used for genetic analysis for 
disease detection, toxicology, forensics, industrial 
processing, and environmental monitoring. 

The identity verification system of the present invention 45 
10 is a next generation pen based tool. It enables the most 
widely used Microsoft Windows based word processing 
application to be used as a workflow automation system by 
empowering documents with an electronic signature — 
attaching signatures to Microsoft Word documents with any 50 
pen device 

The identity verification system of the present invention 
10 enables a user to bind an electronic signature to a Word 
document. The identity verification system of the present 
invention 10 is compatible with Windows based word pro- 55 
cessing application to be used as a workflow automation 
system by empowering documents with an electronic sig- 
nature. The increasing use of electronic data transmission 
makes the identity verification system of the present inven- 
tion 10 a necessary product. Individuals frequently need to so 
print documents to have them signed and then are required 
to fax them, scan them for storage or keep extensive hard 
copy archives. 

The identity verification system of the present invention 
10 is for use with standard business forms such as purchase 65 
orders, timecards, expense reports, and personel evaluations. 
The identity verification system of the present invention 10 
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enables the author of a form to insert multiple signature 
blocks and specify who is to sign each signature block and 
why they are signing. The name of each designated signee 
is inserted into the appropriate signature block. 

The principles of the present invention are also applicable 
to (1) multi-purpose pens; and (2) classic pens with ink 
cartridges. As pen and pencil applications grow, many will 
want to carry one stylus-implement that can be a pen and/or 
a pencil, that is compatible with pen-based computers, and 
can be used at POS terminals and other similar sites where 
financial transactions occur. By including a fingerprint sen- 
sor and an encrypted print within the conventional pen, the 
pen becomes the exclusive property of the one or more 
individuals who have their prints encrypted within the pen. 

Throughout this application, various U.S. Patents, 
Applications, PCT Applications, and Provisional Applica- 
tions are referenced by patent application number or title and 
inventor. The disclosures of these Patents/Applications in 
their entireties are hereby incorporated by reference into this 
specification in order to more fully describe the state of the 
art to which this technology pertains. 

It is evident that many alternatives, modifications, and 
variations of the identity verification method of the present 
invention will be apparent to those skilled in the art in light 
of the disclosure herein. It is intended that the metes and 
bounds of the present invention be determined by the 
appended claims rather than by the language of the above 
specification, and that all such alternatives, modifications, 
and varations which form a conjointly cooperative equiva- 
lent are intended to be included within the scope of these 
claims. 

What is claimed is: 

1. A method of authenticating user identity, comprising: 
grasping a stylus as a transaction request is initiated, the 

stylus enabling a written image to be generated upon a 
flat surface; 

capturing a first sensed fingerprint image of a first finger 
as the first finger is positioned proximate to a first 
fingerprint image sensor the first fingerprint image 
sensor being positioned in such a manner that the first 
sensed fingerprint image is captured as the stylus is 
touched; 

comparing the first sensed fingerprint image with a first 
reference fingerprint image the first reference finger- 
print image being captured during a user registration 
fingerprint image comparison being performed within a 
matching processor; 

capturing a second sensed fingerprint image of a second 
finger as the second finger is positioned proximate to a 
second fingerprint image sensor, the second fingerprint 
image sensor being positioned in such a manner that the 
second sensed fingerprint image is captured as the 
stylus is touched, and approving the transaction request 
whenever the matching processor decides that based at 
least partially upon fingerprint comparison data of the 
second sensed fingerprint image and the second refer- 
ence fingerprint image and the first sensed fingerprint 
image and the first reference fingerprint image, identity 
is confirmed, confirmation determination being inde- 
pendent of any image generated upon the flat surface. 

2. A method of authenticating user identify, the method 
comprising: 

grasping a stylus as a transaction request is initiated, the 
stylus enabling a written image to be generated upon a 
flat surface, the stylus having a cable attachment to a 
writing surface, the cable attachment enabling electri- 
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cal connection between the stylus and a cardreader, the 
cable attachment enabling wire transmission of data 
captured by use of the stylus to a matching processor; 
capturing a first sensed fingerprint image of a first finger 
as the first finger is positioned proximate to a first 5 
fingerprint image sensor, the first fingerprint image 
sensor being positioned in such a manner that the first 
sensed fingerprint image is captured as the stylus is 
touched; 

scanning a user card with the cardreader, the user card 10 
including data relative to a first reference fingerprint 
image; 

comparing the first sensed fingerprint image with the first 
reference fingerprint image, the first reference finger- 
print being captured during a user registration, finger- 15 
print image comparison being performed within the 
matching processor; 

capturing a second sensed fingerprint image of a second 
finger as the second finger is positioned proximate to a 
second fingerprint image sensor, the second fingerprint 20 
image sensor being positioned in such a manner that the 
second sensed fingerprint image is captured as the 
stylus is touched, and 

approving the transaction request whenever the matching 
processor decides that based at least partially upon 25 
fingerprint comparison data of the first sensed finger- 
print image and the first reference fingerprint image and 
the second sensed fingerprint image and the second 
reference fingerprint image, identity is confirmed. 

3. A method of authenticating user identity, the method 30 
comprising: 

grasping a stylus as a transaction request is initiated, the 
stylus enabling a written image to be generated upon a 
flat surface; 35 

capturing a first sensed fingerprint image of a first finger 
as the first finger is positioned proximate to a first 
fingerprint image sensor, the first fingerprint image 
sensor being positioned in such a manner that the first 
sensed fingerprint image is captured as the stylus is ^ 
touched; 

capturing a second sensed fingerprint image of a second 
finger as the second finger is positioned proximate to a 
second fingerprint image sensor, the second fingerprint 
image sensor being positioned in such a manner that the 45 
second sensed fingerprint image is captured as the 
stylus is touched; 

comparing the first sensed fingerprint image with a first 
reference fingerprint image and the second sensed 
fingerprint image with a second reference fingerprint 50 
image, fingerprint image comparison being performed 
within a matching processor; and 

approving the transaction request whenever the matching 
processor determines that identity is confirmed based at 
least partially upon fingerprint comparison data of the 55 
first sensed fingerprint image and the first reference 
fingerprint image, and of the second sensed fingerprint 
image and the second reference fingerprint image. 

4. A method of authenticating user identity, the method 
comprising: 60 

grasping a stylus as a transaction request is initiated, the 
stylus enabling a written image to be generated upon a 
flat surface, the stylus having a cable attachment to a 
writing surface, the cable attachment enabling electri- 
cal connection between the stylus and a card reader, the 65 
cable attachment enabling wire transmission of data 
captured by use of the stylus to a matching processor; 
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capturing a first sensed fingerprint image of a first finger 
as the first finger is positioned proximate to a first 
fingerprint image sensor, the first fingerprint image 
sensor being positioned in such a manner that the first 
sensed fingerprint image is captured as the stylus is 
touched; 

capturing a second sensed fingerprint image of a second 
finger as the second finger is positioned proximate to a 
second fingerprint image sensor, the second fingerprint 
image sensor being positioned in such a manner that the 
second sensed fingerprint image is captured as the 
stylus is touched; 

scanning a user card with the card reader, the user card 
including data relative to a first reference fingerprint 
image; 

comparing the first sensed fingerprint image with the first 
reference fingerprint image, fingerprint image compari- 
son being performed within the matching processor; 
and 

approving the transaction request whenever the matching 
processor determines that identity is confirmed based at 
least partially upon fingerprint comparison data of the 
first sensed fingerprint image and the first reference 
fingerprint image, and of the second sensed fingerprint 
image and the second reference fingerprint image. 

5. A method of verifying a user's identity in a transaction 
wherein the user generates a written image on a reference 
surface through contact of a stylus with the reference 
surface, the method comprising: 

capturing, during the transaction, a plurality of fingerprint 
images as the user touches the stylus; 

determining whether a first captured fingerprint image 
matches a first reference fingerprint image using a 
matching processor; 

generating an identity verification signal with the match- 
ing processor responsive to the determining; and, 

determining whether a second captured fingerprint image 
matches a second reference fingerprint image, wherein 
the second fingerprint image is captured only when a 
correlation between the first captured fingerprint image 
and the first reference fingreprint image falls below a 
predetermined threshold. 

6. The method of claim 5, further comprising: 
detecting, upon contact between the stylus and the refer- 
ence surface during the transaction, a metric property of 
the stylus; and 

wherein generating includes comparing the detected met- 
ric property with a reference data. 

7. The method of claim 5, further comprising capturing, 
prior to the transaction, at least one reference fingerprint 
image with at least one of the plurality of fingerprint sensors 
on the stylus; and storing the at least one captured reference 
fingerprint images for retrieval. 

8. The method of claim 6, wherein retrieving includes 
pr oyidin ga re movable qata storage medium containing the 
atleasfohe reteTeTlcT^irigelprint images, and reading the at 
least one reference fingerprint images from the removable 
data storage medium immediately prior to comparing. 

9. The method of claim 5, wherein the transaction 
includes a computer-executable instruction, and further 
comprising enabling execution of the instruction based on 
the identity verification signal. 

10. A method of authenticating an identify of a user, 
including the steps of: 
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providing a stylus having a fingerprint image sensor; 
capturing a first sensed fingerprint image of a finger of the 

user with the fingerprint image sensor as the stylus is 

grasped by the user; 
capturing a second sensed fingerprint image of a second 

finger of the user with the fingerprint image sensor as 

the stylus is grasped by the user; 
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comparing the first sensed fingerprint image with a first 

reference fingerprint image; 
comparing the second sensed fingerprint image with a 

second reference fingerprint image; and, 
responsively confirming the identity of the user as a 

fiinction of the comparing step. 
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